rpi-eeprom on Ubuntu 20.04

[tigernero]

Ubuntu has released its latest release also for our Raspberry, and in particular for pi4, I wonder not having the package to update the rpi-eeprom bootloader inside how can you do it? will it be impossible to update the bootloader even automatically with Ubuntu?

[trejan]

You can update it manually using a SD card and the recovery files.

You'll need to ask Ubuntu why they're not including the Raspberry Pi specific packages like the firmware updates. The script isn't doing anything strange as it just copies files to /boot so it should run on Ubuntu.

[DougieLawson]

I wonder not having the package to update the rpi-eeprom bootloader inside how can you do it?

Build a spare SDCard with Raspbian Buster Lite, boot that, run sudo apt update; sudo apt dist-upgrade-y; sudo rpi-eeprom-update; sudo poweroff. Then swap back to your Ubuntu card.

Or grab a copy from https://github.com/raspberrypi/rpi-eeprom

[tigernero]

thanks to you for the reply. I will proceed by cloning git and compiling it, or I will keep a copy of Raspbian buster, however I am switching to Ubuntu 20.04 for Raspberry just to have openssh8.2 which on Raspbian is in the bullseye or Sid branch. because i want to use my two yubico dongle for ssh access. or do you have any way to update openssh on Raspbian? in truth I added updated bullseye reposity openssh and then removed but is this merit correct? thanks to who will answer me.

PS. bullseye will come out next year?

PS2. "sudo poweroff" or "sudo shutdown -h now"
are the same thing, do I get the same shutdown effect?

[kerry_s]

you don't need to worry about that in ubuntu, they do it there own way.
don't try to mix systems, your only going to break it.

your using ubuntu, use ubuntu. raspbian is a separate os with different ways

[tigernero]

you don't need to worry about that in ubuntu, they do it there own way.
don't try to mix systems, your only going to break it.

your using ubuntu, use ubuntu. raspbian is a separate os with different ways

I am not joining the 2 systems, I apologize for the bad translation. i mean i'm using Ubuntu 20.04 because it already has openssh8.2. while Raspbian has openssh7.9 in the buster version. I don't want to join anything. i was wondering how can i upgrade openssh from version 7.9 to 8.2 on raspbian without using testing reposity (bullseye). all here.

[kerry_s]

i'm confused i thought you wanted "rpi-eeprom on Ubuntu 20.04" so basically the only thing you really need is "openssh 8.2" on raspbian.

i'm still not understanding why the currently installed ssh is not good enough for you on raspbian. it is the stable version for raspbian buster 10.

if ubuntu works for you, use that. ubuntu has there own boot loader & kernel.

rpi-eeprom is just for raspbian. made specifically for the rpi running raspbian.
https://www.raspberrypi.org/documentati ... teeprom.md

[tigernero]

i'm confused i thought you wanted "rpi-eeprom on Ubuntu 20.04" so basically the only thing you really need is "openssh 8.2" on raspbian.

i'm still not understanding why the currently installed ssh is not good enough for you on raspbian. it is the stable version for raspbian buster 10.

if ubuntu works for you, use that. ubuntu has there own boot loader & kernel.

rpi-eeprom is just for raspbian. made specifically for the rpi running raspbian.
https://www.raspberrypi.org/documentati ... teeprom.md

I'll explain: in practice there were two requests, the first was how to have rpi-eeprom on ubuntu
and the second how to have openssh 8.2 on raspbian.

because openssh 8.2 supports ssh fido / fido2 authentication which openssh7.9 does not.

having 2 fido2 tokens I need openssh8.2.
currently on raspbian it is in the testing / bullseye branch

ubuntu 20.04 has openssh 8.2 while raspian buster openssh7.9.

[GlowInTheDark]

I'll explain: in practice there were two requests, the first was how to have rpi-eeprom on ubuntu
and the second how to have openssh 8.2 on raspbian.

Quite so. It seems to me that:

1) (As others have already suggested) You should be able to setup a different SD card to boot Raspbian and use that to update the eeprom in your RPI4. After that, you can boot back to Ubuntu, and everything should be up-to-date.

2) You should be able to get the source for the latest openssh and compile it on Raspbian. Debian makes this pretty easy.

Note: It has been on my TODO list for a while now to do a self-compile of ssh and/or sshd. There are some changes I want to make in these programs; I just have never gotten around to going through the motions of doing the dance - downloading the source, working through all the dependencies, re-compiling it, testing it, and so forth.

So, I can't say that I've done it - but it should be more-or-less straightforward... (famous last words)

[tigernero]

I Try

Code: Select all

$ sudo apt-get update && sudo apt-get upgrade -y
$ sudo apt-get install gcc libssl-dev libcbor-dev zlib* make

$ sudo apt-add-repository ppa:yubico/stable
$ sudo apt-get update -y
$ sudo apt-get install libfido2-dev

$ cd /usr/local/src
$ wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.2p1.tar.gz
$ tar -zxvf openssh-8.2p1.tar.gz
$ cd /usr/local/src/openssh-8.2p1
$ ./configure --prefix=/usr --with-security-key-builtin
$ make && make install

but after compiling openssh it does not start, when you type sudo service openssh restart I get it wrong

[DougieLawson]

I Try

Code: Select all

$ sudo apt-get update && sudo apt-get upgrade -y
$ sudo apt-get install gcc libssl-dev libcbor-dev zlib* make

$ sudo apt-add-repository ppa:yubico/stable
$ sudo apt-get update -y
$ sudo apt-get install libfido2-dev

$ cd /usr/local/src
$ wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.2p1.tar.gz
$ tar -zxvf openssh-8.2p1.tar.gz
$ cd /usr/local/src/openssh-8.2p1
$ ./configure --prefix=/usr --with-security-key-builtin
$ make && make install

but after compiling openssh it does not start, when you type sudo service openssh restart I get it wrong

Start a new thread for this. Nobody will see it in an EEPROM on Ubuntu thread hidden in the backwater of the forum.

[fruitoftheloom]

I Try

Code: Select all

$ sudo apt-get update && sudo apt-get upgrade -y
$ sudo apt-get install gcc libssl-dev libcbor-dev zlib* make

$ sudo apt-add-repository ppa:yubico/stable
$ sudo apt-get update -y
$ sudo apt-get install libfido2-dev

$ cd /usr/local/src
$ wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.2p1.tar.gz
$ tar -zxvf openssh-8.2p1.tar.gz
$ cd /usr/local/src/openssh-8.2p1
$ ./configure --prefix=/usr --with-security-key-builtin
$ make && make install

but after compiling openssh it does not start, when you type sudo service openssh restart I get it wrong

Start a new thread for this. Nobody will see it in an EEPROM on Ubuntu thread hidden in the backwater of the forum.

Already a post here seems to be a serial poster in multi-language

viewtopic.php?f=66&t=273573&p=1658048#p1658048

[tigernero]

yes, which is why I haven't created another post

[rpdom]

I would just add the bullseye Raspbian repo and pin it at low priority, then install the openssh server from there. (After taking a backup of the system first).

I'm running bullseye on one of my test Pi Zeroes and that has 8.2 installed (only Raspbian Lite though).

Do this at your own risk, but it is easier than compiling something that has already been compiled for you.

[GlowInTheDark]

Given what you wrote, it sounds like it is possible to download and run "bullseye" on an RPi (if you know where to look; where to get the image from).

If so, then wouldn't that be a path for the OP - that avoids mixing and matching distros?

BTW, regarding whether it is safer/better to recompile vs. doing the mix-and-match. I could see arguments either way. The GNU way is always to "use the source, Luke", but that doesn't always work as well in practice as it does in theory. In any case, given that I need to make source code level changes, it seems recompiling is the only avenue that will work for me.

[tigernero]

Then:

with the compilation posted above I can have openssh8.2 but it does not start on reboot, not even with a sudo service ssh start and this worries me.

I then tried method 2 also indicated by rpdom but only to access the reposity bullseye

by adding the entry in /etc/apt/source.ist

Code: Select all

deb http://raspbian.raspberrypi.org/raspbian/ bullseye main contrib non-free rpi

and update openssh to release 8.2 and then remove the reposity.

in truth I also took another microsd where I left the reposities and it updated me 1200 raspbian packages without breaking anything, only the windows had with bulseye completely updated on buster the blue border typical of distro with gui lxDE.

is it possible instead to know how to have or set the priority between two reposities, in order to have bulseye with low priority maybe to then call the package with

Code: Select all

sudo apt install -t bullseye openssh

Thanks

ps.= I have not found anything like this instead of the reposity /etc/apt/sources.list.d/raspi.list

Code: Select all

deb http://archive.raspberrypi.org/debian/ buster main

of this second default reposity that I don't know what it has more than the one written above there is no "bullseye" instead.
but it only has buster as the latest release

[rpdom]

I wouldn't recommend running bullseye yet. I don't know how well it is supported. Certainly the Pi specific changes won't be fully supported.

Adding the minimum number of packages to add openssh 8.2 should work, but remember that bullseye is not stable yet and changes all the time.

[rpdom]

To set bullseye to low priority (ie. ignore unless specifically requested), create a file /etc/apt/preferences.d/bullseye with these contents

Code: Select all

# Pin bullseye to low priority
Package: *
Pin: release n=bullseye
Pin-Priority: 50

To install packages from bullseye you would have to (for example)

Code: Select all

apt install -t bullseye openssh-server

[tigernero]

I added the items to preference as you said but when I go to give the command it tells me:
Reading the list of packages ... Done
E: The "bullseye" value is not valid for APT :: Default-Release since this release is not available from the sources

should i also add the bullseye repository before trying it?

Code: Select all

deb http://raspbian.raspberrypi.org/raspbian/ bullseye main contrib non-free rpi

this?

[tigernero]

inserted reposity bullseye now at the command I receive:


sudo apt install -t bullseye openssh-server
Reading package list ... Done
Dependency tree generation
Reading status information ... Done
Some packages cannot be installed. This may mean
that an impossible situation was requested or, if you are
using a distribution under development, which some packages required
have not yet been created or have been removed from Incoming.
The following information can help resolve the situation:

The following packages have unmet dependencies:
 libc6-dev: Break: libgcc-8-dev (<8.4.0-2 ~) but version 8.3.0-6 + rpi1 is about to be installed
E: Error, pkgProblemResolver :: Resolve threw interruptions. This could be caused by blocked packages.

[rpdom]

I did warn it might not work.

I run a plain bullseye on my test Pi, but just the lite version.

I'm not sure why that install didn't work. I think it should have, but there might be bits I have missed. I'd have to set up a system with buster and add bullseye to test it.

[tigernero]

Thanks for all

[tigernero]

Dear "Rpdom" after several solutions adopted by me to update the openssh-server version from 7.9 to 8.3 failed,

I had succeeded in the task by compiling the portable8.3 version directly from the sources, but I managed instead to better solve by taking the package already compiled deb directly from the bullseye sources

and the error solved updating also that library from the bullseye reposities always

Code: Select all

libc6-dev: Break: libgcc-8-dev (<8.4.0-2 ~) but version 8.3.0-6 + rpi1 is about to be installed

solved updating also that library

Code: Select all

sudo apt install -t bullseye gcc-8-base

then

Code: Select all

sudo apt install -t bullseye openssh-server